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Listing of Claims: 

The following listing of claims shows the present claims with all additions 
shown in underline and all deletions shown in strike -through. 

1 . (Currently Amended) A method of dynamically connecting a 
client node to a serving network, comprising the steps of: 

providing an access network to which a client node has a network 
connection; 

providing at least one access router having a network connection to said 
access network and having a network connection to at least one serving network; 

sending serving network provider advertising information to said client 
node , said network provider advertising information including a provider 
identifier advertised per each service provider ; 

receiving from said client node serving network provider information 
specifying a serving network to which said client node desires access; and 

establishing a secure communication tunnel between said client node and 
said access router through said access network, such that said client node is able 
to send and receive data packets to and from the serving network specified by 
said client node within said secure communication tunnel through said access 
network. 
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2. (Currently Amended) A method as set forth in claim 1, further 
comprising the step of authenticating said client node prior to establishing said 
secure communication tunnel. 

3. (Original) A method as set forth in claim 1, further comprising the 
step of providing a second access router having a network connection to said 
access network and having network connections to at least two serving networks. 

4. (Currently Amended) A method of dynamically connecting a 
client node to a serving network, comprising the steps of: 

providing an access network to which a client node has a network 
connection; 

providing at least one access router having a network connection to said 
access network and having a network connection to at least one serving network; 
sending serving network provider advertising information to said client 

node; 

receiving from said client node serving network provider information 
specifying a serving network to which said client node desires access; and 

establishing a communication tunnel between said client node and said 
access router through said access network, such that said client node is able to 
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send and receive data packets to and from the serving network specified by said 
client node within said communication tunnel through said access network; 

further comprising the step of providing a second access router having a 
network connection to said access network and having network connections to at 
least two serving networks: 

A method as set forth in claim 3, 

wherein when a serving network specified by said client node is associated 
with said second access router, said establishing step further comprises the step 
of binding said communication tunnel to said specified serving network 
associated with said second access router by using serving network information 
of said specified serving network as a security association identifier of said 
communication tunnel. 

5. (Currently Amended) A method as set forth in claim 1, wherein 
said access router has network connections to at least two serving networks, said 
method further comprising the step of establishing a second secure 
communication tunnel between said client node and said access router through 
said access network, such that said client node is able to selectively send and 
receive data packets to and from each of said two serving networks. 
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6. (Currently Amended) A method of dynamically connecting a 
client node to a serving network, comprising the steps of: 

providing an access network to which a client node has a network 
connection; 

providing at least one access router having a network connection to said 
access network and having a network connection to at least one serving network; 
sending serving network provider advertising information to said client 

node; 

receiving from said client node serving network provider information 
specifying a serving network to which said client node desires access; and 

establishing a communication tunnel between said client node and said 
access router through said access network, such that said client node is able to 
send and receive data packets to and from the serving network specified by said 
client node within said communication tunnel through said access network; 

A method as set forth in claim 1 , 

further comprising the step of providing a second access router having a 
network connection to said access network and a network connection to at least 
one serving network, said method further comprising the step of establishing a 
second communication tunnel between said client node and said second access 
router through said access network, such that said client node is able to 
selectively send and receive data packets to and from each of said serving 
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networks associated with said access routers through said communication 
tunnels. 

7. (Original) A method as set forth in claim 1, wherein said step of 
sending serving network provider advertising information comprises the step of 
using a PANA protocol. 

8. (Original) A method as set forth in claim 1, wherein said step of 
sending serving network provider advertising information comprises the step of 
using a Router Discovery mechanism. 

9. (Original) A method as set forth in claim 1, wherein said at least 
one serving network comprises an Internet Service Provider network. 

10. (Original) A method as set forth in claim 1, wherein said at least 
one serving network comprises a Network Access Provider network. 

1 1 . (Original) A method as set forth in claim 1 , wherein said at least 
one serving network comprises a VLAN network. 
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12. (Original) A method as set forth in claim 11, further comprising 
the step of providing a virtual access point in said VLAN serving network, through 
which a client node may connect directly to said VLAN serving network. 

13. (Original) A method as set forth in claim 1, wherein said access 
network comprises an IP access network. 

14. (Original) A method as set forth in claim 1, wherein said access 
network comprises a VLAN access network. 

15. (Original) A method as set forth in claim 14, wherein said VLAN 
access network is partitioned into multiple VLAN access sub-networks. 

16. (Original) A method as set forth in claim 14, further comprising 
the step of providing a virtual access point in said VLAN access network, through 
which a client node may connect to said VLAN access network. 

17. (Original) A method as set forth in claim 1, wherein said client 
node connects to said access network via a remote network. 
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18. (Currently Amended) A method as set forth in claim 1, wherein 
the step of establishing said secure communication tunnel comprises the step of 
using an IPSec key management protocol. 

19. (Original) A method as set forth in claim 1, wherein said client 
node is a mobile node, and said network connection of said client node to said 
access network is a wireless connection. 

20. (Currently Amended) A method as set forth in claim 1, wherein 
said communication tunnel is a secure communication tunnel , said establishing 
step further comprises the step of binding said secure communication tunnel to a 
specified serving network associated with an access router by using serving 
network information of said specified serving network as a security association 
identifier of said secure communication tunnel . 

2 1 . (Original) A method as set forth in claim 20, further comprising 
the step of establishing said secure communication tunnel using an IPSec key 
management protocol. 

Claims 22 - 24 (Cancelled). 
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25. (Currently Amended) A method of connecting a client node to a 
serving network, comprising the steps of: 

providing an access router having a network connection to at least two 
serving networks; 

receiving from said client node serving network information specifying a 
serving network to which said client node desires to have access; 

establishing a secure communication tunnel between said client node and 
said access router through said access network, such that said client node is able 
to send and receive data packets to and from the serving network specified by 
said client node within said secure communication tunnel through said access 
network; and 

binding said secure communication tunnel to said specified serving 
network by using serving network information of said specified serving network 
as a security association identifier of said secure communication tunnel. 

26. (Currently Amended) A method as set forth in claim 25, wherein 
said communication tunnel is a secure communication tunnel , said establishing 
step further comprises the step of binding said secure communication tunnel to a 
specified serving network associated with an access router by using serving 
network information of said specified serving network as a security association 
identifier of said secure communication tunnel . 
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27. (Original) A method as set forth in claim 26, further comprising 
the step of establishing said secure communication tunnel using an IPSec key 
management protocol. 

28. (New) The method of claim 1, wherein said advertising 
information includes said provider identifier being a unique identifier that 
identifies a provider and a provider name character string that represents the 
name of the provider. 

29. (New) The method of claim 28, wherein said advertising 
information is advertised using protocol for carrying authentication information 
for network access (PANA). 
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